diff options
author | Michael Drake <michael.drake@codethink.co.uk> | 2021-03-29 11:32:39 +0100 |
---|---|---|
committer | Michael Drake <michael.drake@codethink.co.uk> | 2021-03-29 11:32:39 +0100 |
commit | 815676f00a4cb3c470970ea7b4cac3452b7f9d88 (patch) | |
tree | a820eea790707e2efd88390abacf2e72864095a0 | |
parent | 1764ddb0017da494a7d7519802404d3fdd011c9a (diff) | |
download | libnsgif-815676f00a4cb3c470970ea7b4cac3452b7f9d88.tar.gz libnsgif-815676f00a4cb3c470970ea7b4cac3452b7f9d88.tar.bz2 |
lzw: Reject bad LZW Minimum Code Size.
The libnsgif.c code was checking this incorrectly, so safest to
check it in the lzw.c code.
-rw-r--r-- | src/lzw.c | 4 |
1 files changed, 4 insertions, 0 deletions
@@ -272,6 +272,10 @@ lzw_result lzw_decode_init( { struct lzw_dictionary_entry *table = ctx->table; + if (code_size >= LZW_CODE_MAX) { + return LZW_BAD_ICODE; + } + /* Initialise the input reading context */ ctx->input.data = compressed_data; ctx->input.data_len = compressed_data_len; |